[ 
https://issues.apache.org/jira/browse/JSPWIKI-699?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13080909#comment-13080909
 ] 

Markus Ebel commented on JSPWIKI-699:
-------------------------------------

I investigated on the third one again and recognized that it is a general 
security problem for all pages:

2011-08-08 13:19:21,686 [http--127.0.0.1-8080-1] DEBUG 
com.ecyrd.jspwiki.util.WatchDog JSPWiki:/JSPWiki/ - http--127.0.0.1-8080-1: 
Entering state Filtering for URL /JSPWiki/, expected completion in 90 s
2011-08-08 13:19:21,686 [http--127.0.0.1-8080-1] DEBUG 
com.ecyrd.jspwiki.ui.WikiServletFilter JSPWiki:/JSPWiki/ - Using 
MyServletResponseWrapper
2011-08-08 13:19:21,714 [http--127.0.0.1-8080-1] DEBUG 
com.ecyrd.jspwiki.auth.SessionMonitor JSPWiki:/JSPWiki/ - Looking up 
WikiSession for session ID=6so+BrpU4TihaAZ5pokFtUIR... not found. Creating 
guestSession()
2011-08-08 13:19:21,716 [http--127.0.0.1-8080-1] DEBUG 
com.ecyrd.jspwiki.auth.login.WebContainerLoginModule JSPWiki:/JSPWiki/ - No 
userPrincipal found for session ID=6so+BrpU4TihaAZ5pokFtUIR
2011-08-08 13:19:21,716 [http--127.0.0.1-8080-1] DEBUG 
com.ecyrd.jspwiki.auth.login.WebContainerLoginModule JSPWiki:/JSPWiki/ - No 
remoteUser found for session ID=6so+BrpU4TihaAZ5pokFtUIR
2011-08-08 13:19:21,717 [http--127.0.0.1-8080-1] DEBUG 
com.ecyrd.jspwiki.auth.login.CookieAssertionLoginModule JSPWiki:/JSPWiki/ - No 
cookie JSPWikiAssertedName present in session ID=:  6so+BrpU4TihaAZ5pokFtUIR
2011-08-08 13:19:21,718 [http--127.0.0.1-8080-1] DEBUG 
com.ecyrd.jspwiki.auth.login.AnonymousLoginModule JSPWiki:/JSPWiki/ - Logged in 
session ID=6so+BrpU4TihaAZ5pokFtUIR; IP=[WikiPrincipal (unspecified): 127.0.0.1]
2011-08-08 13:19:21,718 [http--127.0.0.1-8080-1] DEBUG 
com.ecyrd.jspwiki.auth.login.AbstractLoginModule JSPWiki:/JSPWiki/ - Committed 
Principal 127.0.0.1
2011-08-08 13:19:21,721 [http--127.0.0.1-8080-1] DEBUG SecurityLog 
JSPWiki:/JSPWiki/ - WikiSecurityEvent.UNKNOWN (31) 
[source=com.ecyrd.jspwiki.auth.AuthenticationManager@3281db25, 
princpal=com.ecyrd.jspwiki.auth.WikiPrincipal 127.0.0.1, 
target=com.ecyrd.jspwiki.WikiSession@4a6e4109]
2011-08-08 13:19:21,721 [http--127.0.0.1-8080-1] DEBUG 
com.ecyrd.jspwiki.auth.SessionMonitor JSPWiki:/JSPWiki/ - Looking up 
WikiSession for session ID=6so+BrpU4TihaAZ5pokFtUIR... found it
2011-08-08 13:19:21,721 [http--127.0.0.1-8080-1] DEBUG 
com.ecyrd.jspwiki.auth.SessionMonitor JSPWiki:/JSPWiki/ - Looking up 
WikiSession for session ID=6so+BrpU4TihaAZ5pokFtUIR... found it
2011-08-08 13:19:21,721 [http--127.0.0.1-8080-1] DEBUG 
com.ecyrd.jspwiki.ui.WikiServletFilter JSPWiki:/JSPWiki/ - Executed security 
filters for user=127.0.0.1, path=/JSPWiki/
2011-08-08 13:19:21,737 [http--127.0.0.1-8080-1] DEBUG 
com.ecyrd.jspwiki.auth.SessionMonitor JSPWiki:/JSPWiki/ 
JSPWiki:http://localhost:8080/JSPWiki/ - Looking up WikiSession for session 
ID=6so+BrpU4TihaAZ5pokFtUIR... found it
2011-08-08 13:19:21,738 [http--127.0.0.1-8080-1] DEBUG 
com.ecyrd.jspwiki.WikiContext JSPWiki:/JSPWiki/ 
JSPWiki:http://localhost:8080/JSPWiki/ - Creating WikiContext for session 
ID=6so+BrpU4TihaAZ5pokFtUIR; target=Main
2011-08-08 13:19:21,748 [http--127.0.0.1-8080-1] DEBUG 
com.ecyrd.jspwiki.auth.SessionMonitor JSPWiki:/JSPWiki/ 
JSPWiki:http://localhost:8080/JSPWiki/ - Looking up WikiSession for session 
ID=6so+BrpU4TihaAZ5pokFtUIR... found it
2011-08-08 13:19:21,748 [http--127.0.0.1-8080-1] DEBUG 
com.ecyrd.jspwiki.WikiContext JSPWiki:/JSPWiki/ 
JSPWiki:http://localhost:8080/JSPWiki/ - Creating WikiContext for session 
ID=6so+BrpU4TihaAZ5pokFtUIR; target=Error
2011-08-08 13:19:21,748 [http--127.0.0.1-8080-1] DEBUG JSPWiki 
JSPWiki:/JSPWiki/ JSPWiki:http://localhost:8080/JSPWiki/ - Error.jsp exception 
is: 
java.lang.ExceptionInInitializerError
        at javax.security.auth.Subject$2.run(Subject.java:533)
        at java.security.AccessController.doPrivileged(Native Method)
        at javax.security.auth.Subject.createContext(Subject.java:526)
        at javax.security.auth.Subject.doAsPrivileged(Subject.java:454)
        at com.ecyrd.jspwiki.WikiSession.doPrivileged(WikiSession.java:846)
        at 
com.ecyrd.jspwiki.auth.AuthorizationManager.checkStaticPermission(AuthorizationManager.java:547)
        at 
com.ecyrd.jspwiki.auth.AuthorizationManager.checkPermission(AuthorizationManager.java:194)
        at com.ecyrd.jspwiki.WikiContext.hasAccess(WikiContext.java:819)
        at com.ecyrd.jspwiki.WikiContext.hasAccess(WikiContext.java:799)
        at org.apache.jsp.Wiki_jsp._jspService(Wiki_jsp.java:77)
        at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:847)
        at 
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:369)
        at 
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:326)
        at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:253)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:847)
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:329)
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
        at 
com.ecyrd.jspwiki.ui.WikiServletFilter.doFilter(WikiServletFilter.java:174)
        at com.ecyrd.jspwiki.ui.WikiJSPFilter.doFilter(WikiJSPFilter.java:111)
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
        at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:275)
        at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:161)
        at org.jboss.as.web.NamingValve.invoke(NamingValve.java:57)
        at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:154)
        at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:362)
        at 
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:877)
        at 
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:667)
        at 
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:951)
        at java.lang.Thread.run(Thread.java:662)
Caused by: java.lang.SecurityException: auf Subject basierende Richtlinie 
konnte nicht instanziiert werden
        at javax.security.auth.Policy.getPolicyNoCheck(Policy.java:224)
        at javax.security.auth.Policy.getPolicy(Policy.java:181)
        at 
javax.security.auth.SubjectDomainCombiner$5.run(SubjectDomainCombiner.java:481)
        at java.security.AccessController.doPrivileged(Native Method)
        at 
javax.security.auth.SubjectDomainCombiner.compatPolicy(SubjectDomainCombiner.java:477)
        at 
javax.security.auth.SubjectDomainCombiner.<clinit>(SubjectDomainCombiner.java:47)
        ... 33 more
2011-08-08 13:19:21,750 [http--127.0.0.1-8080-1] ERROR 
com.ecyrd.jspwiki.tags.WikiTagBase JSPWiki:/JSPWiki/ 
JSPWiki:http://localhost:8080/JSPWiki/ - Tag failed
javax.servlet.jsp.JspException: WikiContext may not be NULL - serious internal 
problem!
        at com.ecyrd.jspwiki.tags.WikiTagBase.doStartTag(WikiTagBase.java:86)
        at 
org.apache.jsp.Error_jsp._jspx_meth_wiki_005fMessages_005f0(Error_jsp.java:180)
        at org.apache.jsp.Error_jsp._jspService(Error_jsp.java:126)
        at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:847)
        at 
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:369)
        at 
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:326)
        at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:253)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:847)
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:329)
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
        at 
org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:734)
        at 
org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:541)
        at 
org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:479)
        at 
org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:407)
        at 
org.apache.jasper.runtime.PageContextImpl.doForward(PageContextImpl.java:706)
        at 
org.apache.jasper.runtime.PageContextImpl.forward(PageContextImpl.java:677)
        at 
org.apache.jasper.runtime.PageContextImpl.doHandlePageException(PageContextImpl.java:818)
        at 
org.apache.jasper.runtime.PageContextImpl.handlePageException(PageContextImpl.java:791)
        at org.apache.jsp.Wiki_jsp._jspService(Wiki_jsp.java:137)
        at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:847)
        at 
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:369)
        at 
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:326)
        at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:253)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:847)
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:329)
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
        at 
com.ecyrd.jspwiki.ui.WikiServletFilter.doFilter(WikiServletFilter.java:174)
        at com.ecyrd.jspwiki.ui.WikiJSPFilter.doFilter(WikiJSPFilter.java:111)
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
        at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:275)
        at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:161)
        at org.jboss.as.web.NamingValve.invoke(NamingValve.java:57)
        at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:154)
        at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:362)
        at 
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:877)
        at 
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:667)
        at 
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:951)
        at java.lang.Thread.run(Thread.java:662)

So it is indeed most probably a configration issue, but I use the default JAAS 
stuff, nothing special. I checked the code in WikiTagBase.class and you try to 
get the attribute "jspwiki.context" out of the page context. Do I need to set 
it up somewhere? Any help would be appreciated.


> JSPWiki 2.8.4 does not work with JBoss 7.0 Web Profile
> ------------------------------------------------------
>
>                 Key: JSPWIKI-699
>                 URL: https://issues.apache.org/jira/browse/JSPWIKI-699
>             Project: JSPWiki
>          Issue Type: Bug
>          Components: Core & storage
>    Affects Versions: 2.8.4, 3.0
>         Environment: Windows 7 Prof. 64bit and Ubuntu 9.04 32bit, Java 
> 1.6.0.24
>            Reporter: Markus Ebel
>            Assignee: Harry Metske
>            Priority: Minor
>             Fix For: 2.8.5, 3.0
>
>
> JBoss tell me that it does not find the 
> com.opensymphony.module.oscache.web.tag.UseCachedTag class. But the 
> oscache.jar is available. I tried also version oscache-2.4.1.jar.
> This is the log:
> 21:55:32,164 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-7) 
> MSC00001: Failed to start service 
> jboss.deployment.unit."JSPWiki.war".INSTALL: 
> org.jboss.msc.service.StartException in service 
> jboss.deployment.unit."JSPWiki.war".INSTALL: Failed to process phase INSTALL 
> of deployment "JSPWiki.war"
>       at 
> org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:121)
>       at 
> org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1765)
>       at 
> org.jboss.msc.service.ServiceControllerImpl$ClearTCCLTask.run(ServiceControllerImpl.java:2291)
>       at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown 
> Source) [:1.6.0_24]
>       at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) 
> [:1.6.0_24]
>       at java.lang.Thread.run(Unknown Source) [:1.6.0_24]
> Caused by: org.jboss.as.server.deployment.DeploymentUnitProcessingException: 
> Failed to load class com.opensymphony.module.oscache.web.tag.UseCachedTag
>       at 
> org.jboss.as.ee.component.EEClassConfigurationProcessor.deploy(EEClassConfigurationProcessor.java:95)
>       at 
> org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:115)
>       ... 5 more
> Caused by: java.lang.ClassNotFoundException: 
> com.opensymphony.module.oscache.web.tag.UseCachedTag from [Module 
> "deployment.JSPWiki.war:main" from Service Module Loader]
>       at 
> org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:191)
>       at 
> org.jboss.modules.ConcurrentClassLoader.performLoadClassChecked(ConcurrentClassLoader.java:358)
>       at 
> org.jboss.modules.ConcurrentClassLoader.performLoadClassChecked(ConcurrentClassLoader.java:330)
>       at 
> org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:307)
>       at 
> org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:101)
>       at java.lang.Class.forName0(Native Method) [:1.6.0_24]
>       at java.lang.Class.forName(Unknown Source) [:1.6.0_24]
>       at 
> org.jboss.as.ee.component.EEClassConfigurationProcessor.deploy(EEClassConfigurationProcessor.java:93)
>       ... 6 more

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to